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REMARKS 

Claims 1,3-13, and 15-18 have been amended. No new matter has been introduced 
with these amendments, which are supported in the specification as originally filed. Claims 2 
and 14 have been cancelled from the application without prejudice. Claims 1,3-13, and 15-18 
remain in the application. 

I. Rejection under 35 U.S.C. §102 

Page 3 of the Office Action dated March 7, 2005 (hereinafter, "the Office Action") states 
that Claims 1 - 18 are rejected under 35 U.S.C. § 102(b) as being anticipated by Barkley et al. 
(U.S. 6,202,066). Claims 2 and 14 have been cancelled from the application without prejudice, 
rendering the rejection moot as to those claims. The rejection is respectfully traversed with 
regard to Claims 1, 3 - 13, and 15 - 18* 

Applicants have amended their independent Claims 1,15, and 17 to more clearly specify 
limitations of their claimed invention, and respectfully submit that Barkley fails to teach these 
limitations. In particular, the first limitation of these claims specifies "associating each of a 
plurality of roles with one of the security objects, each of the security objects specifying at least 
one resource and for each resource, at least one action to be permitted on the resource" (see 
Claim 1 , lines 4-6, emphasis added). In other words, each role is associated with one security 
object 

In contrast, Barkley teaches that a plurality of roles may be associated with each of his 
Serial No. 09/943,618 -8- RSW920010125US1 
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"Object Access Types", or "OATs". See, for example, Table 1 in column 11. As shown therein, 
the "accounts" OAT is associated with four roles, namely "accountrep", "branchjnanager", 
t Tmancial_advisor , \ and "teller". Table 1 also shows that the OAT u cd_to_dir" is associated 
with five roles, and the "suggestions 1 ' OAT is associated with two roles. This is distinct from 
Applicants 1 claimed security objects (which, as discussed above, are each associated with one 
role). See also col. 10, lines 65 - 67, where Barkley refers to "the permissions assigned to each 
of the roles with respect to several OATS „ " (emphasis added), and col. 1 1, lines 40 - 56, where 
Barkley discusses the four OATs of Table 1 . Additional references include: 

♦ lines 6-8 of Barkley' s Abstract, where he states that "Different roles [e.g. ? 
"accountjnep" and 'teller"' from Table 1] may have differing permissions to 
objects associated with an OAT [e.g., the "accounts" OAT from Table 1]", 
emphasis added 

♦ col. 4, lines 60 - 62, stating 4C Each OAT thus defines an access control 
specification, which in turn associates a list of individuals, or roles ... with 
corresponding sets of permissions emphasis added (note pjutal use of "roles") 
coL 5, lines 9 - 14, referring to "An OAT is then ... [associated] with the first role 
... and the second role emphasis added 

♦ col. 9, lines 1-3, stating that "a system administrator [canj add or remove a role 
... from the OAT 9 (indicating that an OAT can'have multiple roles) 

Accordingly, Applicants respectfully submit that Barkley fails to teach limitations of their 
independent Claims 1,15, and 17. These claims are therefore deemed patentable over Barkley. 
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Dependent Claims 3 - 13, 16, and 18 are therefore deemed allowable over Barkky by virtue of 
the novelty of the independent claims. The Examiner is therefore respectfully requested to 
withdraw the §102 rejection. 

U, Conclusion 

Applicants respectfully request reconsideration of the pending rejected claims, 
withdrawal of all presently outstanding rejections, and allowance of all remaining claims at an 
early date. 



Respectfully submitted, 




Marcia L. Doubet 
Attorney for Applicants 
Reg- No. 40,999 
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